Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
File:                     1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft (raw, json)
Hash identifier:          MpfHgFpi4j2vSxQvD5DCJl9qu6XwbGRnqQoPAwf6GAU=
Subject key identifier:   76:79:55:F8:BD:1B:4A:30:CF:69:B5:7C:5A:F0:DD:04:F0:62:1A:83
Authority key identifier: F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB
Certificate issuer:       /CN=f879baa89e214133ccf6460f24206ad2c86670eb
Certificate serial:       01A00138721F345577D231ABDA32A9E8F0AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
Manifest number:          0960
Signing time:             Fri 14 Aug 2026 17:01:11 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:11 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:11 +0000
Files and hashes:         1: 1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl (hash: YPaF/XbHYcQ+9FkS+npDOezEg1TEBL7ByOf2fwX40cM=)
                          2: jbum_D98f7wXxL3zfJIV6BCwD8g.roa (hash: C+K78EzxF6K+3h9zUKmt0tIENTKcf8CCLlSHEr+JL70=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:72:1f:34:55:77:d2:31:ab:da:32:a9:e8:f0:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f879baa89e214133ccf6460f24206ad2c86670eb
        Validity
            Not Before: Aug 14 17:01:11 2026 GMT
            Not After : Aug 15 17:01:11 2026 GMT
        Subject: CN=767955f8bd1b4a30cf69b57c5af0dd04f0621a83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5a:dc:0e:81:ae:99:e2:51:1c:9d:07:5e:57:
                    8e:c6:00:c3:35:09:38:a2:d4:ef:65:7c:60:92:c3:
                    c0:88:c9:3b:44:ad:bb:47:4c:4d:1a:4d:a1:0c:52:
                    36:e5:4e:62:42:71:e9:c4:e9:d8:7f:43:43:7d:42:
                    ee:37:55:94:36:c7:78:f9:1c:e2:d4:5c:9b:2a:3e:
                    81:51:ff:fc:8d:e5:66:56:0e:c1:d5:ba:18:33:98:
                    14:c5:4e:8d:88:1f:9a:a2:af:86:ba:6b:f9:1d:7b:
                    af:18:40:93:e0:b6:a9:97:81:35:d3:ae:14:81:86:
                    68:e0:52:31:55:3e:61:b8:73:99:51:06:1b:d3:08:
                    8e:ab:54:31:13:8b:6b:37:a0:37:e3:ee:91:9c:1e:
                    09:41:92:5c:48:2e:eb:46:ee:35:52:96:48:39:47:
                    1c:b7:6a:4e:a8:08:4f:5d:c0:cf:b9:30:95:7a:85:
                    ee:27:f9:07:e6:e4:06:a8:c0:ca:4b:16:10:81:b8:
                    7b:29:28:7c:80:dd:b1:88:00:62:19:a8:d7:23:08:
                    0b:eb:0b:47:86:1b:0a:d4:f4:18:e4:70:1e:b9:4c:
                    11:0e:66:03:80:f7:ab:64:8b:8f:d1:d6:ea:ce:02:
                    24:8d:c1:b5:b8:ee:c6:90:a2:89:d0:7e:25:2e:e1:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:79:55:F8:BD:1B:4A:30:CF:69:B5:7C:5A:F0:DD:04:F0:62:1A:83
            X509v3 Authority Key Identifier:
                keyid:F8:79:BA:A8:9E:21:41:33:CC:F6:46:0F:24:20:6A:D2:C8:66:70:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cefab-4775-4258-b971-4fcf84c85b63/1/1-Hm6qJ4hQTPM9kYPJCBq0shmcOs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:e9:8a:bc:de:33:c1:b6:c8:1a:5a:c6:71:cb:25:a6:b3:b1:
         91:35:15:94:99:5d:28:e9:33:72:f3:54:10:15:bb:89:de:29:
         f5:28:34:f7:e1:c1:25:a1:c8:74:4f:52:3e:d6:67:38:58:4d:
         0f:20:61:35:81:1c:d3:cc:5e:60:ba:22:7c:6c:e6:31:ca:f9:
         94:c0:12:98:66:62:e6:c1:4d:62:87:65:ef:a3:70:63:d6:40:
         08:62:cf:b8:31:33:bb:28:b8:89:48:cd:d7:06:a1:45:87:0f:
         ca:77:b4:d9:8d:a7:c3:31:e8:2c:fe:35:c9:3c:4f:ff:89:54:
         94:6b:2d:86:78:fc:ee:4a:b6:d6:4c:63:33:62:78:9e:e6:ff:
         69:53:01:8a:8a:f9:16:1c:03:83:fa:0d:bc:89:65:04:d1:f8:
         33:c5:c5:fb:5e:01:d5:b2:12:d8:ec:d9:ed:6a:a6:ca:2b:0e:
         0f:1d:b9:ef:35:74:0f:29:db:11:b1:29:4e:24:51:fa:bc:ca:
         96:9d:c6:0e:bb:da:3b:c0:9b:44:6d:ea:35:a9:61:53:c9:cb:
         98:68:0f:14:53:ad:43:f4:25:6e:c1:37:f2:82:f3:14:17:32:
         0f:76:74:97:2c:68:cb:68:1f:aa:5b:54:53:c2:af:47:89:5f:
         84:dc:a6:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:33:02 2026 by rpki-client